# Privacy Policy > How The Niche Society processes personal data: what we collect, why, for how long, and what rights you have under GDPR. URL: https://thenichesociety.ro/en/privacy-policy We explain briefly what data we collect through the site, why, how long we keep it, and how to exercise your rights. **We don't sell data and we don't do profiling.** ## Who processes the data. The thenichesociety.ro website is operated by The Niche Society, based in Bucharest, Romania (hereinafter “The Niche Society,” “we”). For any question about your data, you can write to us at office@thenichesociety.ro. ## What data we collect, and from where. Data you give us: name, email address, phone number, company name and the content of your message, when you book a session or write to us on WhatsApp or by email. Technical data collected automatically when you visit the site: IP address, browser and device type, pages visited and the date of the visit, through server log files and the cookies described in the Cookie Policy. 30 minutes, free. We'll tell you honestly if it makes sense. ## Why we use it, and on what legal basis. To respond to your requests and organize the discovery session (taking pre-contractual steps, Art. 6(1)(b) GDPR). To keep the site working and secure, and to understand, in aggregate form, how it's used (legitimate interest, Art. 6(1)(f) GDPR). For commercial communications, only if you've given explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. ## How long we keep the data. Messages and contact data: for the duration of the discussion, and up to 24 months from the last contact, if no contract is signed. Contractual data: for the period required by tax and accounting legislation. Technical logs: up to 12 months. ## Who we share it with. Providers who help us run the website and our communications (hosting, email, calendar, messaging), under data processing agreements. Some providers may be located outside the European Economic Area; in that case, we use the standard contractual clauses approved by the European Commission. ## What rights you have, and how to exercise them. You have the right to access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent. Write to us at office@thenichesociety.ro and we’ll reply within 30 days at the latest. You also have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro. 30 minutes, free. We'll tell you honestly if it makes sense. ## Frequently asked questions ### What data does the site collect? The data you submit through forms or messages (name, email, phone, company, message), and basic technical data about your visit (IP, browser, pages visited). ### Do you use the data for advertising? No. We don't sell data and we don't do profiling for advertising. If we ever use campaign measurement tools, they'll only be activated with your consent from the cookie banner. ### How do I delete my data? Send an email to office@thenichesociety.ro with your request; we confirm deletion within 30 days at the most, except for data we're legally required to keep. ### Let's see what can be automated in your business. A free 30-minute session: we'll tell you what can be automated, how long it takes and what it costs, with a fixed price after discovery. We reply the same business day.